Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266N.exe

  • Size

    52KB

  • Sample

    250120-gjhfkstray

  • MD5

    9af13eefa1c43616678857117e2d15c0

  • SHA1

    d1d903a3562799fd09997feb404a77797c54a7ca

  • SHA256

    a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266

  • SHA512

    fd42c3164671c4657073de765ef0a9fbbc41f678aff04fc6ab8527ccd38cc549a6c75fb07afa7f54fe2e17d8343c5ede10c1b87eac81dda4e8b44f89eb2814e1

  • SSDEEP

    1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCp:KsdXfBo/DBJBGzkP5PCp

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.28.139

Targets

    • Target

      a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266N.exe

    • Size

      52KB

    • MD5

      9af13eefa1c43616678857117e2d15c0

    • SHA1

      d1d903a3562799fd09997feb404a77797c54a7ca

    • SHA256

      a70689fe56c2ed6bec88c4d70cf276641be871dbe971222e1bea14cac2bfa266

    • SHA512

      fd42c3164671c4657073de765ef0a9fbbc41f678aff04fc6ab8527ccd38cc549a6c75fb07afa7f54fe2e17d8343c5ede10c1b87eac81dda4e8b44f89eb2814e1

    • SSDEEP

      1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCp:KsdXfBo/DBJBGzkP5PCp

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks